
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
File: khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json)
Hash identifier: Y3YhLSvvAm73VhUBv7m/fwEvkDg0FFy8HExUTEZHqW4=
Subject key identifier: FD:94:0F:78:E9:08:CC:79:AE:47:AD:69:9E:99:7D:4A:9E:65:8F:4E
Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
Certificate issuer: /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
Certificate serial: 046A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
Manifest number: 045E
Signing time: Sat 13 Jun 2026 00:15:26 +0000
Manifest this update: Sat 13 Jun 2026 00:15:25 +0000
Manifest next update: Sat 20 Jun 2026 00:15:25 +0000
Files and hashes: 1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: kn1FDORxTrmw/okMYbD0PIgMsLhCHR63mCAdUkEDOFM=)
2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: I3945a68aAj4Bezh1bF6xRl/WpfQZcBM/2Xudp6szlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl
rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
Validity
Not Before: Jun 13 00:15:25 2026 GMT
Not After : Jun 20 00:15:25 2026 GMT
Subject: CN=6a2ca11e-051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:1d:6f:6e:95:03:2c:f9:ec:a7:2c:41:c4:
33:8f:02:a4:e2:bf:aa:12:ff:98:5a:50:bd:4a:5e:
0c:9d:35:a2:bf:85:f3:2f:4d:33:04:d7:13:36:f8:
4a:33:2a:ba:49:72:a3:63:79:6f:b1:a3:dc:c0:43:
48:a1:ff:bc:63:04:2c:e3:fb:84:a5:58:ab:69:bb:
fa:c9:e5:de:dd:f7:a6:b5:df:4f:30:37:10:a2:c3:
fd:c9:08:20:42:a4:8e:3f:11:93:00:9a:96:94:a4:
e4:05:3a:b1:94:0e:2d:de:84:bf:e1:66:59:f2:1f:
a3:e3:7e:47:2e:81:e9:27:e6:6e:ef:d5:59:b1:71:
5d:3a:4d:c3:8d:6c:ae:fd:9b:7a:91:e9:a1:85:a0:
b4:37:9c:1c:f7:ae:76:d3:30:3c:fc:c0:d8:13:10:
b7:d3:ac:39:74:cd:50:58:07:cc:94:7b:c6:3e:8e:
05:55:b4:fe:2c:e8:2f:7d:5f:8d:21:d9:5f:ae:23:
f8:61:ed:c5:1c:0f:7b:ca:27:ac:28:1a:0f:69:e6:
7b:3a:b1:3a:be:0c:85:cc:bc:d6:dd:a0:98:17:80:
fd:ad:b1:16:45:c6:36:0e:ca:ef:37:50:20:84:16:
41:4b:d9:6d:c0:1a:fb:dd:73:72:60:3b:9e:15:90:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:94:0F:78:E9:08:CC:79:AE:47:AD:69:9E:99:7D:4A:9E:65:8F:4E
X509v3 Authority Key Identifier:
keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:33:75:65:67:08:ed:4a:a5:ea:f2:d8:53:b7:3f:7f:34:2e:
0e:b4:10:af:15:cc:80:10:b8:96:f1:ad:80:1a:5f:48:cb:6a:
12:4d:f7:72:80:67:97:4d:8c:9d:8e:55:b8:08:48:58:f0:06:
00:ce:14:c5:12:2d:50:4c:32:b0:b3:4f:9a:37:56:17:03:23:
53:74:18:05:30:01:5a:17:db:3d:74:8f:83:1f:e1:f0:b3:8d:
13:76:86:fd:fc:ef:9c:2e:a8:8a:8a:47:6e:b5:50:dd:25:33:
d9:a8:9d:25:0b:d1:8a:18:8a:7c:b2:73:06:08:0d:3e:e3:7f:
2f:5c:1b:f0:8d:26:63:f2:94:91:d8:a8:a3:00:43:6f:da:0a:
e3:db:c1:48:f7:8f:5d:62:0b:2c:77:a7:0b:79:ea:24:0a:53:
26:ca:97:52:64:3e:92:91:f4:d8:43:f9:b0:14:0c:a8:ef:db:
f7:29:87:5f:45:63:d1:12:e2:e8:72:4a:ac:4c:5c:c8:e2:8e:
a7:03:0a:d3:1d:33:d1:59:f8:e4:9d:29:fd:37:91:43:a1:27:
60:d1:d6:60:61:ae:e1:db:72:bb:35:55:1a:03:de:28:a0:37:
cc:da:58:75:c3:70:e2:13:62:d3:96:c9:29:81:9a:6f:39:97:
f9:46:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:24 2026 by rpki-client